Check Point Advisories

Update Protection against HP Data Protector Manager RDS Denial of Service

Check Point Reference:	CPAI-2011-103
Date Published:	9 Mar 2011
Severity:	Critical
Last Updated:	Saturday 01 January, 2011
Source:	Secunia Advisory SA41735
Protection Provided by:
Who is Vulnerable?	HP Data Protector 6.11 and prior
Vulnerability Description	A denial of service vulnerability was reported in HP Data Protector Manager RDS service. The vulnerability is due to a design error while handling packets containing an overly large size value. Remote attackers could exploit this vulnerability by sending a crafted packet to the vulnerable service on the target server, terminating the RDS service.
Update/Patch Avaliable	The vendor has not released an advisory addressing this vulnerability.
Vulnerability Details	The vulnerability is due to a design error in the the RDS service while handling crafted packets sent to the server. Successful exploitation would terminate the service causing Denial of Service condition.